Permissions System

Overview

The SSO service uses a role-based access control (RBAC) system to manage user permissions. Learn how to implement and manage permissions in your integration.

Permission Types

• isAdmin - Full system access
• canViewUsers - Can view user list
• canManageUsers - Can modify user data

Implementation Example

// Check user permissions
const session = await sso.validateSession();
if (session.isValid) {
  const { permissions } = session.user;
  
  if (permissions.isAdmin) {
    // Show admin features
  }
  
  if (permissions.canManageUsers) {
    // Show user management features
  }
}